CVE-2020-25777

5.4MEDIUM

Key Information:

Vendor
Trend Micro
Status
Trend Micro Antivirus For Mac (consumer)
Vendor
CVE Published:
14 October 2020

Summary

Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Version(s)

Trend Micro Antivirus for Mac (Consumer) 2020 (v10.x) and 2019 (v9.x)

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-09947
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-1242/
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.